Tuesday, 2020-11-17

*** yann-kaelig has quit IRC00:02
*** yann-kaelig has joined #openstack-ansible00:03
*** tosky has quit IRC00:06
*** rfolco has quit IRC00:12
*** lemko4 has joined #openstack-ansible00:20
*** lemko has quit IRC00:21
*** lemko4 is now known as lemko00:21
*** yann-kaelig has quit IRC00:40
*** macz_ has quit IRC00:56
*** cshen has joined #openstack-ansible01:52
*** cshen has quit IRC01:57
*** KurtB has joined #openstack-ansible03:43
*** cshen has joined #openstack-ansible03:52
*** cshen has quit IRC03:57
*** KurtB has quit IRC04:02
*** sri_ has quit IRC04:07
*** sri_ has joined #openstack-ansible04:11
*** johnsom has quit IRC04:46
*** johnsom has joined #openstack-ansible04:49
*** fyx has quit IRC05:11
*** fyx has joined #openstack-ansible05:14
*** johnsom has quit IRC05:18
*** johnsom has joined #openstack-ansible05:19
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-ansible05:33
*** cshen has joined #openstack-ansible05:53
*** cshen has quit IRC05:57
*** johnsom has quit IRC06:27
*** johnsom has joined #openstack-ansible06:27
*** SiavashSardari has joined #openstack-ansible06:54
*** cshen has joined #openstack-ansible07:00
*** cshen has quit IRC07:04
*** miloa has joined #openstack-ansible07:21
*** jbadiapa has joined #openstack-ansible07:27
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Bump SHAs for master  https://review.opendev.org/76276207:39
openstackgerritSiavash Sardari proposed openstack/openstack-ansible-openstack_openrc master: Adding support of system scoped openrc and clouds.yaml  https://review.opendev.org/76209007:41
SiavashSardariis there a problem with gerrit? gitweb links return 404.07:43
noonedeadpunkindeed it does... I think it was working a while ago...07:45
openstackgerritSiavash Sardari proposed openstack/openstack-ansible-openstack_openrc master: Adding support of system scoped openrc and clouds.yaml  https://review.opendev.org/76209007:53
*** macz_ has joined #openstack-ansible07:57
*** macz_ has quit IRC08:02
*** jamesgibo has joined #openstack-ansible08:04
*** rpittau|afk is now known as rpittau08:05
*** andrewbonney has joined #openstack-ansible08:17
*** cshen has joined #openstack-ansible08:27
*** ericzolf has joined #openstack-ansible08:29
*** partlycloudy has quit IRC08:35
*** partlycloudy has joined #openstack-ansible08:36
*** tosky has joined #openstack-ansible08:56
*** nurdie has quit IRC09:01
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_manila master: Updated from OpenStack Ansible Tests  https://review.opendev.org/75417209:01
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_manila master: Add LXC CI job  https://review.opendev.org/70510809:08
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_manila master: Add Manila key generation and distribution  https://review.opendev.org/70501909:13
*** SiavashSardari has quit IRC09:15
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: [WIP] Adjustments for LXC CI  https://review.opendev.org/70510709:21
*** SiavashSardari has joined #openstack-ansible09:22
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_manila master: Add LXC CI job  https://review.opendev.org/70510809:22
SiavashSardarinoonedeadpunk this bug should be assigned to you and I think status should change to fix released. https://bugs.launchpad.net/openstack-ansible/+bug/190402909:33
openstackLaunchpad bug 1904029 in openstack-ansible "Cinder API V2 disabling drives to os_cinder role failure" [Medium,In progress]09:33
noonedeadpunkSiavashSardari: I don't think fix is released for osa.. We need collection to be tagged and updated in galaxy so we could bump collection version here https://opendev.org/openstack/openstack-ansible/src/branch/stable/ussuri/ansible-collection-requirements.yml#L309:35
noonedeadpunkBut yeah, assigned it to myself, thanks!09:36
*** odyssey4me has quit IRC09:50
jamesdentonHey noonedeadpunk - QQ for you. I am trying to fix the Calico job, and it turns out that the package on PyPi is not current and not Py3 compatible. Is it possible to install from git instead? https://github.com/openstack/openstack-ansible-os_neutron/blob/master/vars/main.yml#L5209:58
noonedeadpunkgood question09:59
noonedeadpunkand git repo is still https://github.com/projectcalico/networking-calico ?10:00
jamesdentonyes10:00
jamesdentonwhich also needs to be updated here: https://github.com/openstack/openstack-ansible-os_neutron/blob/master/defaults/main.yml#L6010:01
noonedeadpunkyeah and it seems that pypi is still from opendev10:04
*** jamesdenton has quit IRC10:10
*** jamesdenton has joined #openstack-ansible10:10
jamesdentonnoonedeadpunk i could probably ask for a new release, just wasn't sure if i was overlooking something easy. will be back in a few hrs10:13
noonedeadpunkI think they just don't own this pypi package10:13
noonedeadpunkas it's owned by openstack10:13
noonedeadpunkso it's about transfering ownage of pypi I think10:14
jamesdentonahh i see, ok10:14
noonedeadpunkI will try to find out the way in the meanwhile10:14
jamesdentonsure, thanks for looking10:15
noonedeadpunkwell, I'm thinking if it's already installed from source....10:19
*** jpward has quit IRC10:20
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Bump calico version  https://review.opendev.org/76298510:27
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_neutron master: Return calico to voting  https://review.opendev.org/70265710:29
openstackgerritMerged openstack/openstack-ansible-ops master: Fix repo link in docs  https://review.opendev.org/76280110:52
openstackgerritMerged openstack/openstack-ansible-os_horizon master: Replace deprecated UPPER_CONSTRAINTS_FILE variable  https://review.opendev.org/76205510:58
openstackgerritGeorgina Shippey proposed openstack/openstack-ansible-galera_server master: Fix to mariadb backup script  https://review.opendev.org/76299010:59
*** MickyMan77 has quit IRC11:00
openstackgerritMerged openstack/openstack-ansible stable/ussuri: Disable manila 2 vms tempest scenario  https://review.opendev.org/76180611:31
openstackgerritMerged openstack/openstack-ansible master: Move nspawn to unmaintained state  https://review.opendev.org/76095411:31
*** macz_ has joined #openstack-ansible11:33
*** macz_ has quit IRC11:38
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Fix serialized playbook runs  https://review.opendev.org/75204011:45
*** Gimmix has joined #openstack-ansible11:47
Gimmixhello everyone .  I have a question relating to uploading packages on murano using horizon. The error I get : When I use the upload button on horizon I get :  [wsgi:error] [pid 18891:tid 140077317805824]  /openstack/venvs/horizon-21.1.0/lib/python3.8/site-packages/muranodashboard/packages/views.py:72: UnhashableKeyWarning: The key of11:49
Gimmixopenstack_dashboard.api.glance glanceclient is not hashable and cannot be memoized: ((<weakref at 0x7f6635229900; to 'WSGIRequest' at 0x7f6635408b50>,), (('version', '2'),))I can't find anything relating to this on IRC anyone has hit this issue ?I'm using ussuri11:49
GimmixI'm running ussuri version of openstack-ansible11:49
Gimmixthank you in advance11:50
*** spatel has joined #openstack-ansible11:56
*** cshen_ has joined #openstack-ansible11:58
jrosserGimmix: this looks like a similar thing in horizon https://bugs.launchpad.net/horizon/+bug/183929511:59
openstackLaunchpad bug 1839295 in OpenStack Dashboard (Horizon) "UnhashableKeyWarning: The key of openstack_dashboard .api.nova novaclient is not hashable and cannot be memoized" [Low,Confirmed]11:59
*** spatel has quit IRC12:01
*** cshen has quit IRC12:01
*** ianychoi_ has quit IRC12:10
*** yann-kaelig has joined #openstack-ansible12:11
Gimmixjrosser thank you for your pointer. I had seen this previously . This errors refers to nova and suggests that removing the It seems to suggest removing @memoized resolves this12:13
GimmixI tried this on :  /openstack/venvs/horizon-21.1.0/lib/python3.8/dist-packages/openstack_dashboard/api/glance.py12:14
Gimmixthere are to references to @memoized which I removed. The error persists just not mentioning memoized12:14
GimmixI think something is broken on the horizon murano deployment. The playbook activates /openstack/venvs/horizon-21.1.0/lib/python3.8/site-packages/openstack_dashboard/local/enabled/_50_murano.py12:16
jrosserwell this really would be a murano bug, OSA can only deploy what is in the murano-dashboard code12:16
Gimmixwhich from what it read is obsolete. Removing this file the playbook finishes12:16
Gimmixyeah that's true12:16
jrosserunless we pick a wrong version of the dashboard by accident perhaps12:17
jrosserthats always worth checking12:17
*** jpward has joined #openstack-ansible12:20
jrosserGimmix: actually i think it might be an issue with OSA not controlling the version of murano-dashboard correctly12:21
Gimmixthis is from default role12:22
Gimmixmurano_dashboard_git_repo: https://opendev.org/openstack/murano-dashboard#murano_dashboard_git_install_branch: "{{ horizon_git_track_branch }}"12:22
GimmixI have tried changing it and I'm not having much luck which verifies what you just said12:23
*** rfolco has joined #openstack-ansible12:26
jrosserthere are probably two things really12:26
jrosserwe don't pin/track the version very well which i can fix12:27
jrosserbut there quite likley still some underlying issue in the murano-dashboard code12:27
*** rfolco has quit IRC12:28
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Pin SHA of murano-dashboard so it is controlled by OSA releases  https://review.opendev.org/76300212:28
openstackgerritMerged openstack/openstack-ansible-os_aodh master: Remove duplicated aodh_db_setup_host  https://review.opendev.org/76192212:38
admin0osa+magnum day2 struggle start :)12:38
jamesdentonnoonedeadpunk re: calico, we also need to add etcd3gw to python package list12:43
jamesdentonand i forgot completely about openstack_services.yml12:44
jamesdentonwhich begs the question... is the pip package list only used for distro install?12:44
*** SiavashSardari has quit IRC12:47
noonedeadpunkjamesdenton: no, it's added to neutron_venv_packages. I think what takes come controll here is constraints as we're providing it here https://github.com/openstack/openstack-ansible-os_neutron/blob/master/defaults/main.yml#L8212:49
noonedeadpunk*some control12:49
*** SiavashSardari has joined #openstack-ansible12:49
jamesdentonthere might be some duplication here, since the package is also listed in neutron_optional_calico_pip_packages. So maybe there is a preference? or one overwrites the other?12:49
admin0guilhermesp,  container_infra_prefix=<USE A REGIRTRY WITHOUT PULL RATE LIMIT>  --- any ideas what to use here or what registries are available out there that hold the required k8 packages ?12:52
Gimmixjrosser thank you . I have manually changed this and indeed it built a new package for the murano-dashboard . The problem does persist however . I think something is broken in horizon /  murano12:55
GimmixI will keep trying !12:55
ThiagoCMCMorning guys! Quick question.. I noticed that OSA ignores the `ceph_origin: distro` only at the Compute Nodes, the Ceph Nodes (mons, osds, etcs) they came from `distro`, but at the Compute Nodes, it came from a third party repo! Which I don't wanna do. Any idea why?12:58
noonedeadpunkThiagoCMC: https://opendev.org/openstack/openstack-ansible-ceph_client/src/branch/master/defaults/main.yml#L32-L4113:00
*** nurdie has joined #openstack-ansible13:02
*** nurdie has quit IRC13:08
*** alvinstarr has joined #openstack-ansible13:16
*** Gimmix has quit IRC13:22
guilhermespadmin0: you can use vexxhost's one13:30
guilhermesp container_infra_prefix=registry.public.mtl1.vexxhost.net/magnum/13:30
admin0they won't mind ?13:31
admin0i won't mind hosting a registry if it helps .. have a few servers with lots of bandwidth sitting13:32
admin0do you know how to make a registry mirror ?13:32
guilhermespwe are using harbor admin0 https://goharbor.io/13:32
guilhermespwell you can use for now, no problems but if you wanna take control to replicate docker images by yourself, go for your harbor :)13:33
*** jamesgibo has quit IRC13:41
ThiagoCMCnoonedeadpunk, thanks!13:45
ThiagoCMCnoonedeadpunk, so, just curious, this openstack-ansible-ceph_client role isn't part of ceph-ansible, right?13:45
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: Return calico to voting  https://review.opendev.org/70265713:46
admin0ThiagoCMC,  what i have seen is more and more operators are now asking for ceph to be deployed independently of osa and osa just uses what is provided .. kolla already removed integrated ceph build from the latest( as per irc) and my guess is  osa might also move in that direction someday13:48
*** jamesgibo has joined #openstack-ansible13:49
admin0guilhermesp, in your command, towards the end is " --coe kubernetes -f value -c uuid" -- is that also a part of the command ?13:52
SiavashSardariin my point of view the integration of ceph and kola is quite different with OSA and ceph. because OSA uses ceph-ansible and also supports to have an independent ceph installation.13:52
*** Gimmix has joined #openstack-ansible13:53
*** spatel has joined #openstack-ansible13:58
ThiagoCMCadmin0, this is exactly what I'm trying to do at home! I already deployed Ceph isolated and now, I'm trying to "import" the Ceph configs from OSA subdirs, into my Ceph standalone and do the same but, without OSA.14:01
admin0if you provide the mons and deploy has keys to ssh to them, it works out of the box14:02
*** nurdie has joined #openstack-ansible14:02
ThiagoCMCSure! I know... But my "ceph-ansible" machine is difference from the "osa-ansible" machine...  :-P14:03
openstackgerritMerged openstack/openstack-ansible-os_manila master: Updated from OpenStack Ansible Tests  https://review.opendev.org/75417214:03
ThiagoCMCI want them fully isolated14:03
admin0create the pools and users beforehand .. that way, a single ceph can handle multiple separate osa clusters14:03
admin0they are fully isolated .. ceph-deploy box is diff from  osa-deploy box14:03
ThiagoCMCcool14:03
admin0only thing is osa-deploy box should be able to ssh to the mons14:03
admin0to download the auth stuff14:03
ThiagoCMCHmm Got it14:04
*** cshen_ has quit IRC14:06
*** pto has quit IRC14:12
guilhermespadmin0: no that's just to print me the uuid of the cluster template after creation14:16
guilhermespactually just -f value -c uuid14:17
guilhermespyou should keep --coe kubernetes14:17
*** macz_ has joined #openstack-ansible14:20
*** d34dh0r53 has quit IRC14:22
spateljrosser: or noonedeadpunk i checked out latest master branch and trying to build 6 node api/infra controller nodes and getting stuck here - http://paste.openstack.org/show/800097/14:23
*** macz_ has quit IRC14:24
spatelwhy journalctl trying to send logs to physical host  "Data could not be sent to remote host \"ostack-phx-api-1-1\ "14:25
openstackgerritJonathan Rosser proposed openstack/openstack-ansible master: Make the different methods of integrating with a ceph cluster clearer  https://review.opendev.org/76301914:26
admin0ThiagoCMC, https://www.openstackfaq.com/openstack-and-ceph/14:26
jrosseradmin0: ThiagoCMC i clarified the documentation (hopefully!) as there are now more options for ceph integration than there used to be https://review.opendev.org/76301914:27
*** d34dh0r53 has joined #openstack-ansible14:30
noonedeadpunkspatel: it's not journalctl sends, but it's how osa connection plugin works overall - to reach container we enter host and running commands inside them using lxc tooling14:33
noonedeadpunkThis tasks is just creating directory with file module iirc14:33
spatelhmm that is something went wrong with my setup-host.yml14:33
noonedeadpunkbut the question why it failed connecting to the physical host considering it reached it prevously without any issues is a good one14:34
jrosserreally the trouble is here "Could not resolve hostname ostack-phx-log-1: Name or service not known"14:34
spatellook at this http://paste.openstack.org/show/800098/14:35
spatelwhat is -undefined- component ?14:35
jamesdentonjrosser mgariepy if you have a moment, can you give your blessing here? https://review.opendev.org/#/c/762661/14:35
spatelI have found some of my container doesn't have IP address also14:35
jrosserspatel: previously you found a sitation where the inventory_manage tool would segfault14:36
jrosserso i 'fixed' it by making it print '-undefined-' for things that were undefined rather than a stacktrace14:36
spateljrosser: so its normal ?14:37
noonedeadpunksounds like worth dropping containers and inventory...14:37
spatelnoonedeadpunk: i am going to try that out next, to drop everything14:37
jrosserhold on14:37
spatelk14:38
jrosserthis is quite possibly the first task to try to target ostack-phx-log-1_rsyslog_container-d49b528014:38
jrossercan you ssh to ostack-phx-log-1 from the deploy host, by hostname14:38
noonedeadpunkbut ostack-phx-api-1-1 failed the same way kind of?14:38
spatelping: ostack-phx-log-1: Name or service not known14:38
jrosserright14:38
spateli don't have DNS14:38
spatelI did build many time OSA without any DNS, pure IP14:39
jrosserbut you see my point14:39
spatelit use /etc/hosts for all its container and host14:39
jrosserthe error you are getting is"Could not resolve hostname ostack-phx-log-1: Name or service not known"14:39
jrosserthat was in your paste, and for whatever reason is the root cause14:40
ThiagoCMCadmin0, jrosser - thanks!!!14:40
noonedeadpunkand what do you have in /etc/hosts?14:40
noonedeadpunkjrosser: hm, I though ansible should use `ansible_host` for connection....14:40
jrosserwell, i think this is mixed up with the connection plugin14:40
jrosserso i'm thinking it's going to take the IP specificed in openstack_user_config.yml for the host?14:41
noonedeadpunkI think it should...14:41
spatelnoonedeadpunk: in container /etc/hosts is empty but on infra node i have 100 lines of /etc/hosts entries for each container and host14:41
spatellook like my containers are half baked14:41
jrosserspatel: and in openstack_user_config you gave the IPs for the hosts?14:41
spatelYes all IP14:42
jrosseryou can run any trivial ansible command to test this14:42
jrossercd /opt/openstack-ansible14:42
spatelhttp://paste.openstack.org/show/800099/14:43
jrosserhrm14:43
noonedeadpunkAnd I'm pretty sure we were ok without hosts file on the deploy host....14:45
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: Use privilege escalation to attach to containers  https://review.opendev.org/61540314:45
jrosserspatel: do something like this http://paste.openstack.org/show/800100/14:46
jrosserwith -vv you can see how it resolves the ip for the hostname in the connection plugin14:46
noonedeadpunkwow, I think you need to set env properly as well for this14:47
noonedeadpunkas by default you wont have inventory14:48
spateljrosser: getting no output but WARNING14:49
spatelansible -vv ostack-api-phx-1-1 -m debug -a var=inventory_hostname14:49
spatel[WARNING]: Could not match supplied host pattern, ignoring: ostack-api-phx-1-114:49
noonedeadpunkprovide `-i /opt/openstack-ansible/inventory/dynamic_inventory.py`14:50
spatelhttp://paste.openstack.org/show/800101/14:50
*** ericzolf has quit IRC14:50
noonedeadpunkbut yeah, you need to set env I think first - source /usr/local/bin/openstack-ansible.rc14:52
spatelnoonedeadpunk:  i didn't get that command?14:52
noonedeadpunkoh, well then you don't even need to provide inventory:)14:52
spatelnoonedeadpunk: you are right as soon as i load (source /usr/local/bin/openstack-ansible.rc)14:52
noonedeadpunk`source /usr/local/bin/openstack-ansible.rc` and then run what jrosser asked14:52
-spatel- ostack-phx-infra-1-1 | SUCCESS => {14:53
-spatel- "inventory_hostname": "ostack-phx-infra-1-1"14:53
-spatel- }14:53
openstackgerritJames Denton proposed openstack/openstack-ansible master: Create OSA-specific tempest resources  https://review.opendev.org/73389414:53
noonedeadpunkI think interesting part is right above that14:53
spatelhere is the full output - http://paste.openstack.org/show/800102/14:54
jrossernoonedeadpunk: i get the inventory automatically so long as i'm in /opt/openstack-ansible14:54
noonedeadpunkwtf14:54
openstackgerritJames Denton proposed openstack/openstack-ansible-ops master: Make ELK Journalbeat seek configuration a variable  https://review.opendev.org/74418014:54
noonedeadpunkjrosser: sorry for stupid question, but how did you did that?:)14:55
jrosserhmm? :)14:55
noonedeadpunkit's default ? O_o14:55
noonedeadpunklol14:55
jrosseri *think* so?14:55
noonedeadpunkhaha14:55
jrosserit depends on the dir i think14:55
noonedeadpunkok, til14:55
jrosserhttps://github.com/openstack/openstack-ansible/blob/master/scripts/openstack-ansible.sh#L3814:56
spatelyes i have noticed many time when i want to run ansible adhoc command then i have to do  cd /opt/openstack-ansible/14:57
noonedeadpunkjrosser: lmfao I just realized /usr/local/bin/ansible is a symlink to /usr/local/bin/openstack-ansible14:58
noonedeadpunkI was just sourcing rc file....14:59
spatelso what is the verdict of that output15:00
spateldo you want me to drop and re-build again or keep digging in current failure ?15:00
noonedeadpunkverdict is that connection plugin seems ok15:01
jrossertry for the log host now15:01
spatellet me drop log host and rebuild it again15:01
jrosserwell if it can't resolve from the deploy host i'd be looking first at the openstack_user_config end first15:02
spatelbut you are ok with -unidentified- component ?  I don't have that in my lab that make me worry15:02
spatelLet me sanitize my config first to find any typo or issue. Thank for clue15:03
*** SiavashSardari has quit IRC15:05
spateljrosser: this is normal warning right - [WARNING]: Unable to parse /etc/openstack_deploy/inventory.ini as an inventory source15:12
jrosserthats fine15:13
jrosseryou can specify a static inventory there if you wish to15:13
spatelone thing is bothering me, why i am not seeing -undefined- component in my lab box but i can see that in production where i am deploying15:15
spatelsomething is not right15:15
*** miloa has quit IRC15:15
admin0from cloud-init log on the kube-master, i was able to get port 9511: Connection timed out  line .. moving further15:23
kleiniThiagoCMC: https://docs.openstack.org/openstack-ansible-ceph_client/latest/config-from-file.html <- here is description how to configure OSA without any access to Ceph cluster15:24
ThiagoCMCkleini, awesome!!!   :-D15:25
spateljamesdenton: i have commented on your patch - https://review.opendev.org/#/c/762661/5/vars/redhat.yml15:35
noonedeadpunkspatel: I'm wondering how does test passing then...15:36
noonedeadpunkbtw have you noticed that it's not from rdo repo?15:37
noonedeadpunkmaybe packages are built differently?15:37
spatelnoonedeadpunk: check this out - http://paste.openstack.org/show/800105/15:39
spatelI used same version of openvswitch which came from nfv repo15:40
noonedeadpunkfair enough15:40
spatelnormal OVS deployment doesn't care about socket but if you start deploying dpdk then it need to find socket directory to attach interface15:41
noonedeadpunkyou'd rather put -1 then:)15:41
spatellet me do -115:42
spatelnoonedeadpunk: my patch has that included so not sure how to deal here - https://review.opendev.org/#/c/762729/2/vars/redhat.yml15:43
noonedeadpunkwell, we can rebase jamesdenton patch on top of your then15:44
spatelmake sense15:44
noonedeadpunkbut you need to drop '{{ }}' in https://review.opendev.org/#/c/762729/2/tasks/providers/setup_ovs_dpdk.yml@92 to pass tests15:44
noonedeadpunkinside ternary15:44
spateloh can i use ternary('vhost_socket_directory_group' ?15:45
noonedeadpunkyou can use `ternary(vhost_socket_directory_group, '')`15:45
spatelok let me do that and amend it15:47
noonedeadpunkyou're already in jinja, so variables does not need to be quoted and tagged with jinja agian15:47
spatel+115:47
openstackgerritSatish Patel proposed openstack/openstack-ansible-os_neutron master: Add centos-8 support for ovs-dpdk  https://review.opendev.org/76272915:50
jamesdentonspatel looks like neutron_ovs_socket_path is only referenced by the OVN metadata agent template. That was implemented for Centos7, so not sure if something changed there or not.15:52
jamesdentonbut it doesn't have any impact on OVS-proper15:52
spateljamesdenton: yes it doesn't have any impact but misleading path15:53
jamesdentonthat could be true, but would rather see it addressed on a CentOS 8 OVN-related patch15:55
spatelnoonedeadpunk: after dropping all container it passed journalctl step and now seeing DNS issue on my containers  - http://paste.openstack.org/show/800106/15:55
jamesdentonwhich isn't currently tested AFAIT15:55
spateljamesdenton: soon i am going to start playing with OVN to give it a shot.. hope we can make it stable for OSA15:56
admin0definitely stuck at: https://cloud:9511/v1/certificates/uuid15:56
spateljamesdenton: we can live with that for now, no big deal with path15:56
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: Fix linters  https://review.opendev.org/76304115:57
spatelnoonedeadpunk: i found my issue, damn NetworkManager (i hate this daemon most)15:58
noonedeadpunkit may really appear on centos even after you've dropped it by dependency to smth unrelarted...15:59
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: Fix linters  https://review.opendev.org/76304115:59
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-plugins master: Fix linters  https://review.opendev.org/76304116:00
noonedeadpunk#startmeeting openstack_ansible_meeting16:00
openstackMeeting started Tue Nov 17 16:00:40 2020 UTC and is due to finish in 60 minutes.  The chair is noonedeadpunk. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: openstack_ansible_meeting)"16:00
openstackThe meeting name has been set to 'openstack_ansible_meeting'16:00
noonedeadpunk#topic bug triage16:01
*** openstack changes topic to "bug triage (Meeting topic: openstack_ansible_meeting)"16:01
noonedeadpunkhttps://bugs.launchpad.net/openstack-ansible/+bug/190432716:01
openstackLaunchpad bug 1904327 in openstack-ansible "msgpack version causing linuxbridgeagent to fail on ubuntu 18" [Undecided,New]16:01
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: Test OVS/OVN deployments on CentOS 8  https://review.opendev.org/76266116:01
noonedeadpunkjamesdenton: have you ever seen smth like this?16:01
jamesdentoncan't say i have16:02
jrosserpython2 on train? is that right?16:03
noonedeadpunkI think stdout from stein16:03
jamesdentoni see related bug here: https://bugs.launchpad.net/oslo.privsep/+bug/184482216:03
openstackLaunchpad bug 1844822 in oslo.privsep "linuxbridge agent crash after R ->S upgrade" [Undecided,New]16:03
noonedeadpunkit really is16:04
jamesdentonsame OP16:04
*** pcaruana has joined #openstack-ansible16:04
*** pcaruana has quit IRC16:04
jrosseri guess the best we can do is prod oslo to see if they can patch it?16:06
noonedeadpunkok, so now it's max_buffer_size16:07
noonedeadpunkhttps://msgpack-python.readthedocs.io/en/latest/api.html#msgpack.Unpacker16:08
jrosserthat matches up with this https://bugs.launchpad.net/oslo.privsep/+bug/1844822/comments/516:09
openstackLaunchpad bug 1844822 in oslo.privsep "linuxbridge agent crash after R ->S upgrade" [Undecided,New]16:09
noonedeadpunkbut default is 1024*1024*10016:09
noonedeadpunkOk, well, I can bump ofc version of msgpack but it's in u-c so the only chance to do that is to use global-requirement-pins16:11
noonedeadpunkhowever I'm not sure if it's our bug or not16:12
noonedeadpunkI'd rather left it to oslo and try to figure out the best way here to proceed16:12
openstackgerritJames Denton proposed openstack/openstack-ansible-os_neutron master: Test OVS/OVN deployments on CentOS 8  https://review.opendev.org/76266116:13
noonedeadpunkoh, wait, it's msgpack 1.0 docs16:13
*** gshippey has joined #openstack-ansible16:13
noonedeadpunkbut it does not support py2....16:14
noonedeadpunkok, so interesting one was https://bugs.launchpad.net/openstack-ansible/+bug/190384616:17
openstackLaunchpad bug 1903846 in openstack-ansible " libvirt fails to start because --listen parameter is not permitted with systemd activation socket " [Undecided,New]16:17
noonedeadpunkI haven't check it in detail yet16:17
noonedeadpunkI'm wondering what libvirt do we get on systmes...16:19
noonedeadpunkas it's failing since 5.7.016:20
noonedeadpunkbionic on train looks good16:21
noonedeadpunkso it's from https://github.com/libvirt/libvirt/commit/3a6a725b8f575890ee6c151ad1f46ea0ceea1f3b16:21
jrosserdoes this say which OS versions the bug report is for16:23
noonedeadpunknope, don't see it16:24
noonedeadpunkBut focal will have issues for sure16:24
noonedeadpunklibvirt docs are pretty confusing for me.....16:25
jrosserso do we need those socket listener services started/stopped on nova_libvirtd_listen_tcp/tls ansible vars16:25
jrossersystemctl start libvirtd-tls.socket16:25
jrosserthat sort of thing16:25
noonedeadpunkand we should not use libvirtd.conf for it anymore16:26
jrosserhttps://opendev.org/openstack/puppet-nova/src/branch/master/releasenotes/notes/libvirt-systemd-socket-units-f7b0fc3a4f3c5219.yaml16:26
noonedeadpunkbut um... how to define address to listen on...16:26
noonedeadpunkwell, ok, it's valid and has high priority16:27
jrosseryeah so its config_template and [socket] a.b.c.d:port sort of format16:27
noonedeadpunkyeah, seems like that16:28
jrosseror systemd_service with overrides16:28
jrosserhttps://www.freedesktop.org/software/systemd/man/systemd.socket.html16:28
noonedeadpunkit was so easier in libvirtd.conf :)16:29
noonedeadpunkalso what I'm wondering if we can just move to systemd for previous branches - if this new way won't break pre 5.7 libvirt16:30
noonedeadpunkI think that's most interesting unporcessed ones.16:32
jrosserwe should also be close to a victoria RC?16:34
noonedeadpunk#topic ffice hours16:35
*** openstack changes topic to "ffice hours (Meeting topic: openstack_ansible_meeting)"16:35
noonedeadpunkwell, regarding rc - we need branching for that and I'm pretty stuck with fixing upgrade jobs for magnum16:35
noonedeadpunkbut I've placed beta16:35
jrosseris there something to look at for the magnum problem?16:36
noonedeadpunkhttps://review.opendev.org/#/c/762821/16:36
noonedeadpunkSo I've got https://review.opendev.org/#/c/758461/16:36
noonedeadpunkbut https://review.opendev.org/#/c/755569/5 still fails16:36
noonedeadpunkand it's not only about magnum - octavia fails the same way16:37
noonedeadpunkthey both don't have ability to sent endpoint in tempest plugin16:37
noonedeadpunkmagnm fails on tempest https://storage.gra.cloud.ovh.net/v1/AUTH_dcaab5e32b234d56b626f72581e3644c/zuul_opendev_logs_bf0/755569/5/check/openstack-ansible-upgrade-aio_metal-ubuntu-focal/bf0ca28/logs/openstack/aio1-utility/stestr_results.html16:38
noonedeadpunkI'm about to jsut abandon 758461 and set upgrade jobs non-oting for magnum and octavia....16:39
noonedeadpunkwill probably try to spend some little time on fixing....16:39
noonedeadpunkbut really concidering just setting then to nv16:39
jrosserinteresting that octavia fails, becasue i have some memory of fixing the tempest plugin16:40
jrosserthat was perhaps for no ssl verification rather than endpoint16:41
johnsomWe have this: https://github.com/openstack/octavia-tempest-plugin/blob/master/octavia_tempest_plugin/config.py#L4816:42
noonedeadpunkoh, will try this out now16:43
noonedeadpunkhm, we already have it https://opendev.org/openstack/openstack-ansible/src/branch/master/tests/roles/bootstrap-host/templates/user_variables_octavia.yml.j2#L2416:45
noonedeadpunkbut not during test https://zuul.opendev.org/t/openstack/build/d3e6a58048f944aea338979c65626418/log/logs/etc/host/tempest/tempest.conf.txt#16416:45
noonedeadpunkinteresting16:45
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_octavia master: Fix linter errors  https://review.opendev.org/75557616:46
jrosserwhy are those missing?16:49
noonedeadpunkmaybe I depended on patch that wasn't rebased on top of the fix16:50
*** cshen has joined #openstack-ansible16:50
noonedeadpunkit was added not so far ago or for octavia we're re-defining16:51
noonedeadpunkhttps://opendev.org/openstack/openstack-ansible/commit/eae210982469d3fdb190e61acb6d19df5f00837416:51
noonedeadpunkprobably it was more than that16:51
noonedeadpunkwhen amphora was trying to reach octavia api or smth like this...16:52
*** cshen has quit IRC16:54
noonedeadpunkbut from my point this is the major things that stops us at the moment16:56
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Added Netplan examples for a Openstack Infrastructure node.  https://review.opendev.org/76009016:58
noonedeadpunkand also we need to get to https://review.opendev.org/#/c/752040/3 one day...16:58
noonedeadpunkas it's really a bug we need to look at16:58
noonedeadpunk#endmeeting17:00
*** openstack changes topic to "Launchpad: https://launchpad.net/openstack-ansible || Weekly Meetings: https://wiki.openstack.org/wiki/Meetings/openstack-ansible || Review Dashboard: http://bit.ly/osa-review-board-v2"17:00
openstackMeeting ended Tue Nov 17 17:00:28 2020 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)17:00
openstackMinutes:        http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-11-17-16.00.html17:00
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-11-17-16.00.txt17:00
openstackLog:            http://eavesdrop.openstack.org/meetings/openstack_ansible_meeting/2020/openstack_ansible_meeting.2020-11-17-16.00.log.html17:00
jrossernoonedeadpunk: does this help https://github.com/openstack/magnum-tempest-plugin/blob/master/magnum_tempest_plugin/config.py#L44-L4517:01
noonedeadpunkand get public IP during bootstrap?17:01
jrossernot standard endpoint terminology there had to dig deep in the code, but maybe that will let us override?17:01
noonedeadpunkworth trying17:02
noonedeadpunkoh, well, not public but private17:02
noonedeadpunkyeah, good idea!17:02
*** jamesgibo has quit IRC17:03
jrosserwe must already have a var somewhere for the internal endpoint when setting up the service catalog17:03
jrosserthough that will be defined inside the os_magnum role defaults though17:03
noonedeadpunkin aio we've hardcoded mgmt ip address anyway17:04
jrosserright, so just need to make it into a url i guess17:05
jrosserthat var is used here https://github.com/openstack/magnum-tempest-plugin/blob/master/magnum_tempest_plugin/common/manager.py#L50-L5417:05
jrosserand i guess that it is this line https://github.com/openstack/magnum-tempest-plugin/blob/master/magnum_tempest_plugin/common/manager.py#L5417:05
jrosserwhich is missing endpoint=internalURL/publicURL kind of setting17:06
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible stable/ussuri: Fix octavia tempest tests  https://review.opendev.org/76304817:16
*** jamesgibo has joined #openstack-ansible17:17
noonedeadpunkoh, we do bootstrap on ussuri during upgrade jobs17:17
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Add magnum tempest URL  https://review.opendev.org/76304917:19
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_magnum master: Fix linter errors  https://review.opendev.org/75556917:20
*** jamesgibo has quit IRC17:21
noonedeadpunkalso would be awesome to get some reviews https://review.opendev.org/#/q/is:open+owner:self+label:Verified :)17:22
noonedeadpunkeventually I'd love to merge adjutant support https://review.opendev.org/#/c/756313/17:22
jrosser^ almost that link..... but not quite17:22
jrosser'self' -> me17:22
noonedeadpunkahhhh17:22
noonedeadpunkhttps://review.opendev.org/#/q/is:open+owner:noonedeadpunk+label:Verified17:23
jrosseroh also i forgot to mention, andrewbonney has some opportunity to look at the zun role17:24
noonedeadpunkthat is really cool17:25
noonedeadpunkwe also have damiandabrowski who tries to look on elk but face that same thing we see in CI.17:25
noonedeadpunkI hope they will find out the way to get elk fixed17:26
*** rpittau is now known as rpittau|afk17:27
spatelnoonedeadpunk: so finally we released victoria rc release right?17:37
noonedeadpunkbeta17:37
noonedeadpunknot rc17:37
noonedeadpunkthere's a big difference under it...17:38
spateloh ok17:38
noonedeadpunkwhich means that we don't have victoria branches yet17:38
noonedeadpunkjamesdenton: calico seems jsut working:) https://review.opendev.org/#/c/702657/17:39
spatelwhen do you think we will have that one. (not asking for specific date but just trying to tell my team that we are moving toward victoria and skipping ussuri)17:39
noonedeadpunkjust needed to bump it version, as until they dropped pbr it was not instalkling at all17:39
noonedeadpunkI want to fix magnum and octavia and branch after that17:40
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_neutron master: Return calico to voting  https://review.opendev.org/70265717:40
*** yann-kaelig has quit IRC17:58
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible master: Fix networking_nsx_git_track_branch  https://review.opendev.org/76306318:00
spatelnoonedeadpunk: after dropping and re-creating container works.18:02
noonedeadpunkspatel: this year defenitely, not sure about if we will be able to land in november, but I'd love to place it asap tbh....18:03
*** andrewbonney has quit IRC18:05
spatelnoonedeadpunk: hmm, if its saying longer time then i can go back to stable/ussuri and later come back to victoria when its stable release18:05
spatel*taking18:05
openstackgerritDmitriy Rabotyagov (noonedeadpunk) proposed openstack/openstack-ansible-os_ironic master: Define condition for the first play host one time  https://review.opendev.org/75634018:19
*** cloudnull is now known as kecarter18:36
*** kecarter is now known as cloudnull18:36
*** klamath_atx has quit IRC18:36
ThiagoCMCGuys, is the tag 22.0.0.0b1 about Victoria?18:38
*** d34dh0r53 has quit IRC18:43
*** d34dh0r53 has joined #openstack-ansible18:46
spatelThiagoCMC: Yes i believe 22.x.x.0b1 is first beta19:03
ThiagoCMCWheee!19:04
ThiagoCMCBTW, guys, I just had an idea... The introduction of a new Bridge, let's call it "br-ceph" for now. Today, Ceph Public is mixed with "br-mgmt" but, this is kinda bad when you want to isolate things. So, I'll be deploying a fresh OSA now, with this new bridge and make things separated (I have a 2.5Gbps switch where I want deploy Ceph OSDs and Clients, without VLANs, using MACVLAN actually, for "br-ceph19:08
ThiagoCMC / public" and regular "br-storage / cluster").19:08
*** gyee has joined #openstack-ansible19:18
*** cshen has joined #openstack-ansible19:28
*** jawad_axd has joined #openstack-ansible19:36
admin0ThiagoCMC, br-mgmt for ceph is only used by glance as far as i know19:37
admin0 ThiagoCMC .. help me make magnum work..  kubernetes on top of osa19:38
spateladmin0: glance should use br-storage19:39
spatelglance container is attached to br-storage interface19:40
spatelceph use br-mgmt for mon nodes communication with OSD (control-plane)19:41
admin0day2 osa magnum + kubernetes failed :) will continue again tomorrow19:41
ThiagoCMCadmin0, the br-mgmt is actually used by all Ceph Clients of OSA! According to the examples... Including the Compute Nodes/Libvirt <-> OSDs traffic! That's why I want to isolate this. It will help to also, deploy Ceph independently from OpenStack and linke then together later on19:43
ThiagoCMCadmin0, I'll have some Kubernetes lessons this Friday! lol Maybe later! haha!19:43
spatelOh wait, i just did tcpdump on my br-mgmt and its not talking or doing anything with ceph19:43
ThiagoCMCcheck your rbd within some instance's libvirt, they might be on top of br-mgmt subnet19:44
spatelmy all compute nodes using br-storage for RBD communication19:45
ThiagoCMCWhat about this: https://github.com/openstack/openstack-ansible/blob/master/etc/openstack_deploy/user_variables.yml.prod-ceph.example#L19 ?19:45
spateli have br-storage interface on mon/osd/compute nodes19:45
ThiagoCMCI see... Well, the provided example mix Ceph's "public_network" with OSA br-mgmt and this is ... Bad (from my point of view).19:46
spatelThis is what i have in my production config19:46
-spatel- # Ceph network19:46
-spatel- monitor_address_block: "10.50.0.0/21"19:46
-spatel- public_network: "10.50.0.0/21"19:46
-spatel- cluster_network: "10.51.0.0/21"19:46
spatel10.50.0.0 is my br-storage and cluster_network network 10.51.0.0 is my dedicated network for OSD replication19:47
spatelbr-mgmt has nothing to do with ceph except just deploy or run playbook19:48
ThiagoCMCIs your "cidr_networks.container" different?19:48
ThiagoCMCGot it19:48
ThiagoCMCThat's what I want!19:48
ThiagoCMCcool19:48
-spatel- cidr_networks:19:48
-spatel- container: 172.28.0.0/2119:48
-spatel- tunnel: 172.29.0.0/2119:48
-spatel- storage: 10.50.0.0/2119:48
ThiagoCMCYeah19:48
ThiagoCMCgood one19:48
ThiagoCMC:-P19:49
spateladmin0: what is the issue are you having with kube ?19:50
spatelI had lots of fun with that but they it work out nice19:50
djhankbadmin0: could you get VMs to boot at all?19:51
spatelThis is my kube go to command, always works for me - http://paste.openstack.org/show/800112/19:52
*** cshen has quit IRC20:02
admin0they boot, but in the end they say they are unable to connect to https://cloud:9511: Connection timed out20:03
jrosserdo you have a proper cert?20:07
jrosserworth replicating that call with curl from the vm to see what’s happening20:08
jrosserspatel: do you deploy ceph with osa or separate?20:13
spatelwith OSA20:13
spatelmy mon nodes in lxc containers20:13
jrosserlooks like you have a good config there with public_network and not follow the example20:15
jrosserthe example doesn’t really look right20:15
*** cshen has joined #openstack-ansible20:16
spateljrosser: I had lots of issue during first time deployment and finally figured out how to deal with that. totally agreed we should change that example20:17
admin0i use storage network as both public and cluster network20:27
spatelthat is also fine if its not hammering performance.20:28
spatelI kept it in separate interface so performance20:29
spatelin OSA document is there nice list of tags which we can use for quick reference?21:05
spateli meant ansible tags to run playbook snippets21:06
djhankbI keep getting something similar to this "AuthorizationFailure: resources.kube_masters.resources[0].resources.kube-master-bfv: Authorization failed." when it gets to this part of the build: https://opendev.org/openstack/magnum/src/branch/master/magnum/drivers/k8s_fedora_coreos_v1/templates/kubemaster.yaml#L90721:07
*** cshen has quit IRC21:48
*** ThiagoCMC has quit IRC22:05
*** spatel has quit IRC22:31
*** ThiagoCMC has joined #openstack-ansible22:58
*** cshen has joined #openstack-ansible23:00
*** cshen has quit IRC23:04
*** tosky has quit IRC23:58

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!